supabase-debugger
Pass
Audited by Gen Agent Trust Hub on Apr 22, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses shell commands like
docker ps,npx supabase status, andgrepto verify the state of local services and analyze project source code for configuration patterns. These are standard operations for a local debugging tool. - [PROMPT_INJECTION]: The skill provides a workflow for auditing localStorage usage that scans the local
src/directory. This creates a surface for indirect prompt injection if application files contain malicious instructions intended for the agent. 1. Ingestion points: Thegrepcommand inSKILL.md(Workflow 8) reads content from thesrc/directory. 2. Boundary markers: Absent. 3. Capability inventory: The skill includes workflows that usepsqlfor database modification,curlfor network requests, andbashfor command execution. 4. Sanitization: No sanitization is performed on the ingested source code content. - [SAFE]: The SQL and JavaScript snippets provided are standard administrative patterns for Supabase monitoring and RLS validation. The skill uses placeholders for sensitive values and does not perform any unauthorized data exfiltration or persistence operations.
Audit Metadata